Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: m0tXApGi9Gi5rDH0Gykb20GeiNayswz8ouu+hRhIJss=
Subject key identifier: 3D:F8:20:6A:C5:C7:20:E9:76:63:E7:E2:4A:19:86:4D:67:81:F3:3F
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 019A4DAAFF637CDD4668BCC6366BF1C1FDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 171D
Signing time: Tue 04 Nov 2025 07:00:43 +0000
Manifest this update: Tue 04 Nov 2025 07:00:43 +0000
Manifest next update: Wed 05 Nov 2025 07:00:43 +0000
Files and hashes: 1: CxW9CMhkxVrayKYNgSlraHOeOQM.roa (hash: Pd98lEBP8p/URa6hKL85tikarNFnXac6Jxt7ytM5JK0=)
2: exq4u1SZfA7x1zIrKqzjzge4W3E.roa (hash: 6hKC5aSxn1eYqBHCVJ0qgpvsfeNY0GeupedGw9IKcyA=)
3: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: PJOoCXPu87Un1dELZf01B9O94K5tcRf1zDPGDTg3l1w=)
4: zIANn_XjTHpNl_tFmNq6MbPyZNE.roa (hash: b1/JePGfEJmKChck6onI1sptZi1SnAwXlnetMtXFNvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ff:63:7c:dd:46:68:bc:c6:36:6b:f1:c1:fd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Nov 4 07:00:43 2025 GMT
Not After : Nov 5 07:00:43 2025 GMT
Subject: CN=3df8206ac5c720e97663e7e24a19864d6781f33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:be:9c:2d:2e:b5:85:bf:d7:9e:38:bb:dc:
b9:ad:6f:07:3c:06:45:e2:29:0c:b3:cd:3c:58:41:
f6:8a:95:67:dd:b8:99:99:f6:f9:c4:2f:3d:80:1f:
4e:c6:85:43:7b:99:24:92:23:20:4b:73:41:6e:94:
d9:95:59:39:6e:d9:4a:13:17:31:4e:5f:92:73:f3:
96:8b:b5:80:96:17:59:07:8b:ee:54:ec:74:0f:6a:
d7:3e:ff:1a:99:9e:99:b1:94:f5:a1:0d:0b:bb:0d:
af:30:7a:91:62:a8:27:b1:f4:e9:85:e3:03:d2:af:
6c:a5:a7:98:04:58:d0:53:a0:8c:a9:e2:06:fa:0f:
7c:af:23:b0:44:42:df:a2:7a:92:9f:f9:86:85:16:
34:5e:d3:30:8e:9f:e0:96:72:e3:11:e0:a7:fa:e9:
4e:4f:77:f3:4d:02:0c:c5:8e:30:68:81:a2:89:8e:
1a:fb:02:2b:b8:01:a2:13:63:2a:af:c3:ff:f9:3d:
91:8c:b9:6f:70:e3:b9:eb:f0:5b:ab:8f:1f:83:1f:
f2:75:80:7c:a4:28:f5:67:32:af:90:f1:82:bb:de:
5d:fa:33:08:bd:65:7e:7b:8f:cb:b3:ee:e2:16:d9:
c4:13:8b:b7:fd:4e:33:94:f2:6e:77:40:53:36:c0:
4e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F8:20:6A:C5:C7:20:E9:76:63:E7:E2:4A:19:86:4D:67:81:F3:3F
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7f:3d:b2:31:a4:90:e3:d1:81:99:02:01:0b:71:0b:2e:52:
eb:a9:c7:52:c5:64:cb:d5:8c:e3:55:c6:a1:b8:01:8b:d1:18:
e3:bf:e1:f5:9d:12:48:88:34:73:6d:7e:35:e0:73:e6:89:e7:
5f:b9:91:e6:36:b3:21:f7:56:91:30:1b:87:da:58:19:6c:e2:
3a:c5:4d:c0:d6:71:30:46:34:1f:2b:d4:70:eb:04:ad:c8:6c:
be:08:4a:9e:82:d5:97:8f:2b:35:c6:11:a7:54:94:d2:80:2a:
17:cd:d2:39:7e:7c:be:d8:5a:73:72:ed:56:a8:1d:f5:24:3e:
b5:0e:b9:eb:59:5f:fa:39:e3:96:2c:32:36:aa:de:e0:a0:7c:
ac:34:bb:07:69:3d:41:ed:b9:d3:c7:1a:c2:bf:4c:b2:98:b1:
13:f7:13:cf:a8:3b:82:24:01:ce:fd:51:97:d1:79:b4:19:08:
fd:97:7d:f7:33:31:3d:57:a8:20:24:0a:8e:a1:41:22:fa:28:
be:cc:78:23:f8:0f:bf:c7:42:30:71:f3:61:d1:b0:8f:c4:f2:
d3:03:40:5f:7e:ed:b3:71:41:22:1c:c7:56:96:a7:bb:33:c4:
36:99:15:13:42:9c:93:06:2e:47:0d:db:6b:40:b7:2f:78:d4:
16:ff:a9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:00 2025 by rpki-client